Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7517b8c7-8de2-4b85-9105-c38059a918f0.roa
File: 7517b8c7-8de2-4b85-9105-c38059a918f0.roa (raw, json)
Hash identifier: zaOk/a1fI0v9azs96EXxEjxOz4tLEKeTzRmimOmx4G8=
Subject key identifier: DD:0B:03:71:CC:8D:65:43:99:51:CE:9B:CA:DC:06:C4:24:CB:5C:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72275E44AD8ABCADD8984287CFC0D5906A5AFC8D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7517b8c7-8de2-4b85-9105-c38059a918f0.roa
Signing time: Tue 14 Oct 2025 16:40:29 +0000
ROA not before: Tue 14 Oct 2025 16:40:29 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:27:5e:44:ad:8a:bc:ad:d8:98:42:87:cf:c0:d5:90:6a:5a:fc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:40:29 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=e4de65e89857a8b4f17f15387ffa76738014f99ea223c6955d2ba77acf6f9c8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:95:73:69:ea:e1:2b:4c:f9:dd:00:bf:a1:
95:09:4e:f0:d0:0e:f2:9f:7d:bc:af:94:7c:39:98:
2e:0f:36:13:e2:ad:2a:da:7e:d4:07:90:68:37:72:
61:be:10:5f:6b:82:dc:3d:65:3d:32:bb:36:cf:87:
87:54:89:e5:e7:f0:99:1d:fa:ea:65:c0:dd:44:e4:
d3:36:e0:02:fe:87:80:55:fd:d7:22:15:b4:46:cb:
ba:f3:ee:20:64:ac:a6:2a:82:3b:a6:0e:01:72:bc:
fc:1d:0b:e7:c8:d4:34:25:48:15:04:43:ec:bd:4e:
ec:74:17:20:45:d4:2b:c2:f1:e2:33:01:78:3b:83:
64:28:28:1a:9c:77:35:46:37:46:c9:ae:e6:85:d3:
71:02:bc:b3:fa:8a:3f:09:33:e9:e4:e9:fa:59:a1:
bb:7e:c9:8d:24:34:c2:1c:16:e6:f6:4a:99:5f:9d:
2d:c7:82:20:c7:9a:ed:09:7e:c6:9c:06:7d:7f:61:
ac:63:fe:48:37:72:d6:0d:c4:e7:ab:f5:47:a0:81:
ba:6b:e2:15:8c:f0:85:01:5a:90:e1:b8:d7:40:05:
01:0d:2b:90:e8:6c:9b:b5:db:25:99:b0:2c:29:07:
49:71:23:dc:b4:d9:68:be:a9:4e:91:63:71:aa:d7:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:03:71:CC:8D:65:43:99:51:CE:9B:CA:DC:06:C4:24:CB:5C:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7517b8c7-8de2-4b85-9105-c38059a918f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b1:39:c4:b8:33:c6:79:e1:00:e5:98:89:82:7c:fb:3d:e8:
10:6a:90:dd:bf:5c:ef:2a:46:16:7a:79:91:db:0e:5c:d2:bf:
fa:87:3a:7b:0a:35:fb:37:d7:0d:15:cf:89:de:2e:38:60:b8:
0a:03:5d:4b:3c:49:a7:d8:35:ff:95:34:74:59:27:14:03:d0:
fd:33:e5:46:87:21:5c:5b:97:38:91:51:fb:70:fd:f1:8d:3b:
71:6b:96:9a:d8:ff:f7:98:11:7c:56:c0:32:bb:c5:2f:de:6a:
f9:29:fd:05:95:52:47:7a:94:22:2b:ef:1d:8a:10:88:1a:2f:
02:8d:ac:51:80:fe:ee:19:03:2c:65:9b:30:05:c0:a5:ed:87:
50:c9:ab:6b:a1:f1:3e:c1:50:ea:1a:15:9c:55:e8:dc:be:88:
72:4a:5b:bb:25:f7:96:d4:cb:b8:d5:ab:cb:01:c0:58:ad:cf:
f1:33:8c:2f:cf:c7:5f:55:a3:6b:45:59:2d:79:a1:c4:2e:14:
37:f0:90:2d:76:26:4d:ab:50:fb:e6:dc:93:c1:dd:e2:76:68:
b9:b4:e6:22:2c:73:5c:23:ae:56:eb:70:32:bd:f1:9e:61:82:
6e:9f:ed:9b:cd:98:58:cd:b5:d7:61:3f:80:b4:b5:04:e0:84:
94:39:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:22 2025 by rpki-client